Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32322d3234203d3e203532373438.roa (raw, json)
Hash identifier:          WV1iUPhW8HMvZ3EVURDAGoyt0gQGKBPILjQoNlaC6XM=
Subject key identifier:   47:78:6C:46:61:AA:47:42:BD:BA:D4:09:2C:C6:60:BE:AC:E7:A3:5D
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       4E8901AD77445FCAD7DDBA7AC335C3BEFEDD3450
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa
Signing time:             Wed 05 Mar 2025 21:59:50 +0000
ROA not before:           Wed 05 Mar 2025 21:54:50 +0000
ROA not after:            Wed 04 Mar 2026 21:59:50 +0000
asID:                     52748
IP address blocks:        177.155.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:01:ad:77:44:5f:ca:d7:dd:ba:7a:c3:35:c3:be:fe:dd:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Mar  5 21:54:50 2025 GMT
            Not After : Mar  4 21:59:50 2026 GMT
        Subject: CN=47786C4661AA4742BDBAD4092CC660BEACE7A35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:51:7f:57:2e:e8:f1:f9:71:c4:1a:d5:0c:
                    74:f6:a2:b2:f9:94:55:02:af:eb:e0:a4:74:3d:43:
                    f8:61:3f:5f:63:fe:3c:7c:0a:75:39:b4:be:fe:66:
                    8a:40:3a:bb:e1:0c:26:dc:ee:87:ae:0a:1e:e7:ed:
                    77:f1:8c:59:28:7e:93:40:ca:96:dd:8f:a3:dd:b5:
                    52:89:5c:3b:f9:ad:d1:ef:b5:ec:4d:5e:80:1e:a8:
                    5f:91:dd:33:75:fa:5e:08:7f:33:f5:e8:12:53:31:
                    3f:71:64:c5:46:79:b1:da:ef:19:d1:f6:bf:4e:6e:
                    f2:3e:c9:9e:67:0a:dc:90:1a:53:00:84:4d:b2:72:
                    ac:2b:26:8b:e8:9e:3f:e6:29:27:98:b5:72:91:b4:
                    f0:29:44:f4:87:97:c4:e8:95:2a:c0:2a:81:76:a0:
                    e5:a1:9d:42:89:69:bb:37:ec:a4:0d:cb:19:dc:57:
                    ba:41:1e:16:1c:69:98:3b:55:fc:c1:d6:f9:df:d5:
                    5e:8b:06:3b:8e:dc:0a:c7:a8:8d:9d:4e:76:dd:e2:
                    70:fb:6f:27:33:18:c8:1f:12:92:08:54:f7:ff:48:
                    f0:6a:e9:1e:59:9d:ae:db:a7:0c:01:db:25:5a:24:
                    da:88:44:0b:5b:d2:55:2d:cf:62:29:e3:65:55:20:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:6C:46:61:AA:47:42:BD:BA:D4:09:2C:C6:60:BE:AC:E7:A3:5D
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:06:b2:ec:32:27:27:3c:da:92:45:76:b1:82:79:48:b4:
         e9:71:31:0f:c7:2a:d8:06:55:4c:e2:ff:14:27:64:06:c1:20:
         2c:b5:1b:29:57:55:c8:b4:bd:ca:4b:dc:85:53:4b:e3:e2:02:
         90:26:5c:67:db:b4:4f:95:75:e8:03:3a:06:7c:d5:46:2b:e7:
         20:fc:90:a6:c6:de:81:ed:80:9d:dc:d0:44:25:c5:20:ab:c4:
         80:a2:73:76:1e:73:d7:ad:7c:65:23:60:22:61:fb:4f:2f:05:
         83:92:9d:cf:f9:2a:c8:ab:38:ee:b7:60:06:6c:f5:2c:75:a6:
         01:7b:29:ea:c7:42:68:a1:8b:e3:d8:9b:b3:07:c9:61:9b:cb:
         f6:17:91:e0:08:ff:06:a3:f6:0c:44:4c:00:35:a0:2e:79:de:
         f1:7b:0d:67:09:9d:8b:0f:15:2b:83:a1:6c:d3:5e:24:e0:8a:
         89:4e:5e:5a:b7:91:2d:cf:91:48:99:09:b6:40:87:34:a9:9a:
         3c:ba:54:90:1f:23:fe:53:93:32:39:d0:19:c7:e0:7f:07:74:
         39:63:19:bb:9c:9b:9d:d8:ee:f0:b1:4d:14:4e:21:99:b2:bf:
         4a:56:34:ea:17:bd:90:d6:c1:71:91:73:29:d6:74:68:10:bd:
         02:29:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:20 2025 by rpki-client